Differences between escape vs encodeURIComponent

⚠ Browser differences

This vector shows the differences between escape and encodeURIComponent

Shazzer Master

Created Oct 15, 2024

Updated Aug 7, 2026

Unable to render tweet button

Detecting browser...

CategoryXSS Execution

VisibilityPublic

TypeJS

CharsetUTF-8

Template used:

let chr = String.fromCodePoint($[i]);0x0D
escape(chr) !== encodeURIComponent(chr) && log($[i])

Sample payloads

let chr = String.fromCodePoint(33);0x0D
escape(chr) !== encodeURIComponent(chr) && alert(33)

let chr = String.fromCodePoint(43);0x0D
escape(chr) !== encodeURIComponent(chr) && alert(43)

let chr = String.fromCodePoint(47);0x0D
escape(chr) !== encodeURIComponent(chr) && alert(47)

let chr = String.fromCodePoint(64);0x0D
escape(chr) !== encodeURIComponent(chr) && alert(64)

let chr = String.fromCodePoint(126);0x0D
escape(chr) !== encodeURIComponent(chr) && alert(126)